An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.
Please note: authentication is not required in order to exploit this vulnerability.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://success.trendmicro.com/en-US/solution/KA-0017998 | Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-24-1418/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jul 2025, 16:24
Type | Values Removed | Values Added |
---|---|---|
First Time |
Trendmicro
Trendmicro cloud Edge |
|
CPE | cpe:2.3:a:trendmicro:cloud_edge:*:*:*:*:*:*:*:* | |
References | () https://www.zerodayinitiative.com/advisories/ZDI-24-1418/ - Third Party Advisory | |
References | () https://success.trendmicro.com/en-US/solution/KA-0017998 - Vendor Advisory |
22 Oct 2024, 19:35
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-22 19:15
Updated : 2025-07-31 16:24
NVD link : CVE-2024-48904
Mitre link : CVE-2024-48904
JSON object : View
Products Affected
trendmicro
- cloud_edge
CWE
No CWE.